311 matches found
CVE-2025-21298
Windows OLE Remote Code Execution Vulnerability
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-29974
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2025-30394
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
CVE-2025-21337
Windows NTFS Elevation of Privilege Vulnerability
CVE-2025-24071
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21189
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVE-2025-24983
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-33053
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
CVE-2025-24054
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21181
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-24985
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-21413
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21230
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-24993
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-21293
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2025-24984
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24991
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-33073
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
CVE-2025-21302
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21263
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-30397
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-21341
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21327
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-32709
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-32701
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-21245
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21310
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21417
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21211
Secure Boot Security Feature Bypass Vulnerability
CVE-2025-21260
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21273
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-27480
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2025-21204
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2025-21329
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21213
Secure Boot Security Feature Bypass Vulnerability
CVE-2025-21377
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-21274
Windows Event Tracing Denial of Service Vulnerability
CVE-2025-21303
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21286
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21332
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21376
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2025-47160
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-21369
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-29810
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
CVE-2025-21318
Windows Kernel Memory Information Disclosure Vulnerability